Nagios Support Forum

I have one Log Server, and we are getting ready to add a second one.
The first LS is using an NFS share on our Isilon to store logs.
When I spin up the second LS, can it also use that same store on the Isilon?

Are these two instances being clustered? If so, they need to use the same store:

https://assets.nagios.com/downloads/nag ... enance.pdf

cdienger wrote:Are these two instances being clustered? If so, they need to use the same store:

https://assets.nagios.com/downloads/nag ... enance.pdf

Yes, they will be in the same cluster.
Per that document, they need to use the same snapshot repository.
Can both servers also point their /usr/local/nagioslogserver/elasticsearch/data/ to the same store as well?

chud wrote:Can both servers also point their /usr/local/nagioslogserver/elasticsearch/data/ to the same store as well?

It could be the same store but would need to be a different path on the store.

One thing worth pointing out also is that by using the same storage device you still have a single point of failure, and if you lose the store, you would lose your whole clusters worth of data.

Thanks.

One more question/scenario: just out of curiosity, could we build our own multi-node ElasticSearch cluster, and point our two Nagios Log Servers at it, say if it was behind haproxy and had a vip to use as an entry point? Is Nagios Log Server able to use external ElasticSearch?

chud wrote:Thanks.

One more question/scenario: just out of curiosity, could we build our own multi-node ElasticSearch cluster, and point our two Nagios Log Servers at it, say if it was behind haproxy and had a vip to use as an entry point? Is Nagios Log Server able to use external ElasticSearch?

This may be possible in addition to the built-in ES (not instead of) using custom outputs in the Logstash, but we would not be able to provide supported for this setup.

Ok, thanks for the info.
You can close the thread.

chud wrote:Ok, thanks for the info.
You can close the thread.

Great!

Locking thread